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DETAILED ACTION 

1. A telephone interview was made with Bryan T. Giles on April 13, 2007 to incorporate 
parts of applicant's disclosure in the claims to particularly point out the applicant's invention. 
Based on the interview, Examiner's amendment has been made for independent claims 1 and 12, 
and dependent claims 2-11 and 23 are also amended to comply with amendments made in the 
independent claims. 

Response to Amendments/Arguments 

2. The examiner accepts the terminal disclaimer filed on 03/30/2007 and withdraws an 
obviousness double patenting rejection previously made. 

3. Appellant's amendments and arguments filed on 03/21/2007 are persuasive. 

EXAMINER'S AMENDMENT 

2. An examiner's amendment to the record appears below. Should the changes and/or 
additions be unacceptable to applicant, an amendment may be filed as provided by 37 CFR 
1.312. To ensure consideration of such an amendment, it MUST be submitted no later than the 
payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview with 
Bryan T. Giles on April 13, 2007. 

3. Claims 1-12 and 23 are amended as follows. 
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1. (Currently amended) A common computing device having instantiated thereon a 
protected media path for delivering encrypted content from a plurality of content delivery 
sources to a plurality of sinks, the protected media path comprising: 

a media base providing a protected environment in the common computing device and 
including a common infrastructure of core components effectuating processing of the content 
from a first source of the plurality of content delivery sources and delivering the processed 
content to a first sink of the plurality of sinks, and also including a policy engine enforcing 
policy on behalf of the first source, the policy corresponding to the content from the first 
source and including rules and requirements for accessing and rendering the content, whereby 
the media base allows content to flow through the common computing device in a protected 
fashion, and allows for arbitrary processing of the protected content in the common computing 
device; 

a source trust authority (SOTA) in the common computing device and associated with 
and corresponding to the first source of the content, the SOTA acting as a secure lockbox 
connecting the first source to the media base and representing the first source in the protected 
media path, decrypting the content from the first source, translating policy associated with the 
content from a native format of the first source into a format amenable to the policy engine, 
propagating the translated policy to the policy engine, and releasing the decrypted content to 
the media base; and 

a sink trust authority (SITA) in the common computing device and associated with and 
corresponding to the first sink of content, the SITA acting as a secure lockbox connecting the 
first sink to the media base and representing the first sink in the protected media path, re- 
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encrypting the decrypted content released by the SOTA, receiving the translated policy from 
the policy engine, and re-translating the translated policy from the format of the policy engine 
into a format amenable to the first sink, whereby the re-encrypted content and the re-translated 
policy are delivered to the first sink, and whereby the first sink receives the re-encrypted 
content and the re-translated policy, decrypts the received content, and renders same based on 
the received policy. 



2. (Currently amended) The common computing device of claim 1 wherein the media base 
of the instantiated protected media path further includes at least one supplemental component 
providing additional protected functionality to the common computing device. 

3. (Currently amended) The common computing device of claim I further having 
instantiated thereon a media application selecting the content to be delivered, selecting the 
first source for providing the content by way of the protected media path, if necessary 
selecting the first sink to receive the provided content by way of the protected media path, 
actuating the media base to arrange the protected media path according to the selected first 
source and the selected first sink. 

4. (Currently amended) The common computing device of claim 3 wherein the media 
application provides delivery commands to the media base to control delivery of the content 
from the selected first source to the selected first sink. 
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5. (Currently amended) The common computing device of claim 3 wherein the media 
base prevents the media application from having access to the content delivered within the 
protected media path. 

6. (Currently amended) The common computing device of claim 3 wherein the media 
base prevents the media application from taking any action with respect to the content 
contrary to the policy corresponding to the content. 

7. (Currently amended) The common computing device of claim I wherein the SOTA of 
the instantiated protected media path allows content thereof to be delivered through the protected media 
path only if the SOTA is satisfied that the media base, the policy engine thereof, each 
employed component thereof, and the SITA of the protected media path is trustworthy and has 
rights to be in contact with the content based on the policy corresponding thereto. 

8. (Currently amended) The common computing device of claim 7 wherein any element 
can be shown to be trustworthy based on a proffer of an acceptable token that vouches for the 
element. 

9. (Currently amended) The common computing device of claim 8 wherein any element 
can be shown to be trustworthy based on a proffer of a verifiable digital certificate from an 
acceptable vouching authority. 
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10. (Currently amended) The common computing device of claim 8 wherein a 
trustworthy element is trusted to decide whether same can be in contact with the content 
based on the policy corresponding thereto and based on whether same can honor the policy 
corresponding to the content. 

1 1 . (Currently amended) The common computing device of claim 8 wherein a 
trustworthy element is trusted to respond truthfully to a rights-based query from another 
element. 

12. (Currently amended) A method of delivering encrypted content from a plurality of 
content delivery sources to a plurality of sinks by way of a common computing device, the 
method comprising: 

an application on the common computing device calling to a media base on the 
common computing device with a definition of thccontent from a first source of the plurality of 
content delivery sources, the first source, and4he a first sink of the plurality of sinks; 

the media base including a policy engine that enforces policy on behalf of the first 
source, the policy corresponding to the content from the first source and including rules and 
requirements for accessing and rendering the content, and establishing a protected media path 
based on the defined content, the first source, and the first sink to effectuate such delivery, the 
established protected media path including: 

the media base; 

a source trust authority (SOTA) on the common computing device and associated with 
and corresponding to the first source, the SOTA acting as a secure lockbox connecting the first 



Application/Control Number: 10/820,673 Page 7 

Art Unit: 2136 

source to the media base and representing the first source in the protected media path, 
decrypting the content from the first source, translating policy associated with the content from 
a native format of the first source into a format amenable to the policy engine, propagating the 
translated policy to the policy engine, and releasing the decrypted content to the media base; and 
a sink trust authority (SITA) on the common computing device and associated with and 
corresponding to the first sink, the SITA acting as a secure lockbox connecting the first sink to 
the media base and representing the first sink in the protected media path, re-encrypting the 
decrypted content released by the SOTA, receiving the translated policy from the policy 
engine, and re-translating the translated policy from the format of the policy engine into a format 
amenable to the first sink, whereby the re-encrypted content and the re-translated policy are 
delivered to the first sink, and whereby the first sink receives the re-encrypted content and the 
re -translated policy, decrypts the received content, and renders same based on the received 
policy; 

the SOTA on behalf of the first source establishing trust with respect to the protected 
media path; 

the SOTA upon trust being established with respect to the protected media path 
propagating the translated policy corresponding to the content to be delivered to the protected 
media path; 

the SOTA determining a particular type of action to be taken with the content as 
delivered through the protected media path; 

the SOTA deciding whether the particular type of action can be taken with the content as 
delivered through the protected media path and informing the media base regarding same; 
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the media base informing the application whether the particular type of action can be 
taken, and if so the application proceeding by commanding the media base to perform such 
type of action. 

23. (Currently amended) The method of claim 12 further comprising: 

the SOTA obtaining the encrypted content from the first source; 

the media base processing the decrypted content as necessary and delivering the 
processed decrypted content to the SITA; and 

the SITA encrypting the processed decrypted content and delivering the encrypted 
processed content to the first sink. 

Allowable Subject Matter 

5. Claims 1-23 are allowed. 

4. The following is a statement of reasons for the indication of allowable subject matter: 

Applicant's arguments were persuasive. Applied reference Candelore discloses a system 
that enables a digital content provider to supply content to customers under multiple digital rights 
management (DRM) schemes but none of prior art of record neither alone nor in combination 
teach the a common computing device for multiple content delivery sources and sinks 
comprising a source trust authority (SOTA) that decrypts the content from the source, translates 
policy associated with the content from a native format of the source into a format amenable to 
the policy engine, propagates the translated policy to the policy engine, releases the decrypted 
content to the media base; and a sink trust authority (SITA) that corresponds to a sink of content, 
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the SITA re-encrypts the decrypted content released by the SOTA, receives the translated policy 
from the policy engine, and re-translates the translated policy from the format of the policy 
engine into a format amenable to the sink, whereby the re-encrypted content and the re-translated 
policy are delivered to the sink, and whereby the sink receives the re-encrypted content and the 
re-translated policy, decrypts the received content, and renders same based on the received 
policy. 

Any comments considered necessary by applicant must be submitted no later than the 
payment of the issue fee and, to avoid processing delays, should preferably accompany the issue 
fee. Such submissions should be clearly labeled "Comments on Statement of Reasons for 
Allowance." 

Conclusion 

6. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Eleni A. Shiferaw whose telephone number is 571-272-3867. 
The examiner can normally be reached on Mon-Fri 8:00am-5:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nasser R. Moazzami can be reached on (571) 272-4195. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent • 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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